Skip to content
OpenAdvisories

Vendor

avatar_uploader

1 known vulnerabilities.

Products

avatar_uploader 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-50957

    Drupal avatar_uploader 7.x-1.0-beta8 Reflected XSS

    Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the file parameter. Attackers can craft URLs with script payloads in the file parame…

    avatar_uploader avatar_uploader